Privacy Policy

1. Introduction

LIBOSIFY ("we", "our") is an AI-powered digital wardrobe management app. We take the protection of your personal data seriously and comply with GDPR requirements and the personal data legislation of the Republic of Uzbekistan.

By using our app, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect the following types of data:

Profile information: first and last name, username, email, gender, profile photo (optional)
Style quiz answers and preferences: styles, sizes, height, fit, modesty level, favourite and avoided colours, shopping habits
Clothing photos: images you upload to create your digital wardrobe
Wardrobe data: item details — category, colour, brand, material, size, price, purchase date, season, notes, wear history
Saved outfits: clothing combinations created by you or recommended by AI, and your likes and dislikes
Activity history: upload dates, last wear dates
Location: used for weather-based outfits, only if you allow location access
Notification settings: push notification token, quiet hours, time zone
Purchase history: subscription status and App Store purchases
Settings and preferences: data processing consents, language settings
Advertising data: which rewarded ad you chose to watch and when, and the signed reward confirmation from Google AdMob (see section 9a)
Technical data: device identifiers used by Firebase (identifier for vendor, Firebase installation ID), device type, app version, crash and performance data, IP address (kept as a hash in our rate limits and security logs)

3. How We Use AI

To recognise items and suggest outfits we use:

OpenAI (USA), GPT-4o models: identifies the item category and description, writes outfit names and explanations. We send the item photo. For outfit names and explanations we send the category, colour, material, pattern and fit of your items, the occasion, the weather and up to five of your preferred styles. In Stylist mode we send the photo of an item in a store (full frame, background not removed); it is not stored
Google Cloud Vision (Google, USA): checks that the photo shows clothing (labels, objects, text, image safety)
Photoroom (France): backup background removal when our own service can't do it
Rembg (our service on Google Cloud Run, Belgium): background removal
K-means (our servers): the item's main colour

Photos are sent to AI services only after your explicit permission — the “Privacy & AI” sheet shown in the app at your first upload or in-store check. You can withdraw it in the app's Privacy settings; new photos will then no longer be sent. This permission is requested in app version 1.0.7 and later; earlier versions process photos on upload. Please update the app.

Requests to AI services contain no name, email or contact details. Photo metadata (such as location and camera details) is removed before a photo is sent to these services. OpenAI and Google Cloud do not use data sent through their APIs to train their models.

4. Where Your Data Is Stored

Data is stored and processed on Google Cloud Platform and Firebase servers:

Database: Cloud Firestore (asia-south1, Mumbai, India)
Photos: Firebase Storage (us-central1, USA)
Server functions: Cloud Functions (us-central1, USA)
Background removal: Cloud Run (europe-west1, Belgium)
Security logs: stored for 90 days, then deleted automatically

Cross-border transfer. Your data is processed outside the Republic of Uzbekistan — in the USA, India and the EU, and by the processors listed in section 5. By using the app and allowing AI processing you agree to this transfer.

Google Cloud complies with GDPR, SOC 2, ISO 27001 standards. The Data Processing Addendum (DPA) is available at cloud.google.com.

5. Data Processors

We use the following external data processors. We do not sell your personal data to any of them.

Processor	Purpose	Data Shared
Google AdMob (Google LLC, USA / Google Ireland)	Optional rewarded video ads, reward verification, fraud prevention, aggregated ad reporting	IP address (approximate location), device and app information, ad interactions, diagnostic data; your account ID and a one-time session ID to confirm a reward. No advertising identifier (IDFA) — we do not request tracking permission. Policy: https://policies.google.com/technologies/partner-sites
OpenAI (USA)	Item category and description, outfit explanations, Stylist in-store check	Item photos; for outfit texts, the category, colour, material, pattern and fit of your items, the occasion, the weather and up to five preferred styles; in-store photos in Stylist mode (no name, email or contacts)
Google Cloud Vision (USA)	AI photo check (is it clothing, text, image safety)	Item photos
Photoroom (France)	Backup background removal	Item photos
Google Cloud & Firebase (India, USA, EU)	Data storage, authentication, cloud functions, containers	Email, photos, analytics
Google Analytics for Firebase	Usage analytics (can be turned off)	App and purchase events linked to your account ID, device identifiers, approximate location derived from your IP address
Firebase Crashlytics	Crash reports	Crash details, device model and OS version, app log lines, account ID
Firebase Performance Monitoring	App performance (can be turned off)	Performance traces and approximate region derived from your IP address, not linked to your account
Firebase Cloud Messaging & Apple Push Notification service	Push notifications	Push notification token, notification text (for example, item names)
Firebase App Check & Apple DeviceCheck	Protecting our servers from abuse	Device attestation token
OpenWeather (UK)	Weather-based outfit recommendations	Location coordinates
RevenueCat	Subscription management and purchase validation	Purchase data, device identifiers, app user ID
Resend (USA)	Service emails (email verification, password reset)	Email address
ImprovMX	Forwarding of emails you send to support@libosify.com to our support inbox	Your email address and the content of your message
Serper.dev	Product search via Google Shopping	Search queries (clothing descriptions, no PII)
Telegram (Bot API)	Telegram sign-in and our internal admin notifications	Telegram ID, name and @username; for account support, email, gender and subscription status are shown to administrators in a private Telegram chat, and, when needed for support, photos and details of your wardrobe items
Google Sheets	Records of the former Telegram card-payment bot (closed on 24 Sep 2026). Being deleted	Telegram ID, name, @username, LIBOSIFY username, phone number, amount, payment screenshot link

We rely on each processor's data processing terms; links are listed in the app's Privacy settings.

6. Your Rights (GDPR)

Under GDPR you have the following rights:

Right of access: request a copy of all your data (Data Export feature in profile)
Right to rectification: correct inaccurate information in your profile
Right to erasure: completely delete your account and all associated data
Right to restrict processing: disable AI categorization or analytics
Right to data portability: export your data in JSON format
Right to object: withdraw consent to processing at any time

7. Data Retention

Wardrobe items: stored until you delete them
Photos: original and processed versions stored until item deletion
Profile: stored until account deletion
Security logs: automatically deleted after 90 days
Exported data: download links valid for 24 hours

When you delete your account, your data is removed from our live systems within 30 days. Encrypted backups are kept for up to 98 days and then overwritten. Purchase records at RevenueCat/Apple and analytics/crash data at Google are kept according to their retention settings.

8. Security

We apply the following security measures:

Data encryption in transit (TLS 1.3)
Photo encryption at rest (AES-256)
Multi-factor authentication for server access
Regular security audits and updates
Rate limiting to protect against attacks
Biometric app lock (optional)
IP addresses in logs and rate limits are stored as SHA-256 hashes (pseudonymised, not anonymous)

9. Analytics

Usage Analytics is on by default; you can turn it off in Privacy settings. Analytics events and crash reports are linked to your account ID (Google Analytics for Firebase, Firebase Crashlytics). Google Analytics derives approximate location from your IP address and records purchase events linked to your account ID. Performance data (Firebase Performance Monitoring) is not linked to your account.

Turning off Usage Analytics stops analytics and performance collection; crash reports are still sent. Server-side funnel events are stored under a salted pseudonymous ID and deleted with your account.

9a. Advertising

LIBOSIFY is free. When you want an extra AI action beyond the free daily amount, you can choose to watch a short rewarded video ad. Ads are shown only after you tap to watch one — no banners and no ads at app start.

Ads are served by Google AdMob and are non-personalised: they are not based on your activity in other apps or websites. We do not ask for permission to track you (App Tracking Transparency), so your device's advertising identifier (IDFA) is not available to us or to Google. Google may process your IP address (to estimate approximate location), device and app information, ad interaction and diagnostic data to deliver ads, limit how often you see them, prevent fraud and report aggregated results.

To credit a reward, the app passes your account ID and a one-time session ID to Google; Google sends them back to our server in a signed confirmation. We store this confirmation (ad network, ad unit, transaction ID, time) with your account to prevent abuse; it is deleted together with your account. Ad events are not sent to Google Analytics. Install attribution for ads uses Apple's SKAdNetwork, which does not identify you.

10. Children

The App is intended for users aged 16 and older. We do not knowingly collect data from children under 16. If you learn that a child under 16 has provided us with personal data, please contact us immediately for deletion.

11. Policy Changes

We may update this privacy policy from time to time. We will notify you of significant changes through the app or email.

The date of last update is shown at the top of this page.